JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.92.20.135

34.92.20.135 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 87%: ?

87%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	135.20.92.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.92.20.135

Whois 34.92.20.135

IP Abuse Reports for 34.92.20.135:

This IP address has been reported a total of 19 times from 15 distinct sources. 34.92.20.135 was first reported on August 26th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 22:38:56 (11 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:38:52.598874 2026] [security2:error] [pid 25033:tid 25033] [client 34.92.20.135:38480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.revelation-of-truth.galaxyretro.com"] [uri "/html/.git/config"] [unique_id "apIN_G3tg2gx5L2OXYMdTQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 22:22:46 (27 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:22:42.015437 2026] [security2:error] [pid 3356584:tid 3356745] [client 34.92.20.135:45308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailporte.com"] [uri "/htdocs/.git/config"] [unique_id "apIKMlaK7I3gFT1ABKRvtgAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-28 21:53:33 (56 minutes ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 20:31:25 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:31:17.251015 2026] [security2:error] [pid 20804:tid 20804] [client 34.92.20.135:36348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theraband.chevronparkett.com"] [uri "/html/.git/config"] [unique_id "apHwFaxc-Et01g2cstlbAQAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 18:48:24 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:48:17.311057 2026] [security2:error] [pid 15241:tid 15241] [client 34.92.20.135:52050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianmagarzo.com"] [uri "/public/.git/config"] [unique_id "apHX8b7BjXm2GUO1CeaBSwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 16:41:38 (6 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.92.20.135 (135.20.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:41:31.489698 2026] [security2:error] [pid 16440:tid 16440] [client 34.92.20.135:37928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "niubeachbookings.com"] [uri "/htdocs/.git/config"] [unique_id "apG6O0XPlQESJrMWIBsgfgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-28 15:31:39 (7 hours ago)	[FriAug2817:31:35.0238512026][security2:error][pid2836788:tid2836909][client34.92.20.135:0]ModSecuri ... show more [FriAug2817:31:35.0238512026][security2:error][pid2836788:tid2836909][client34.92.20.135:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"solaristech.ch\"][uri\"/src/.git/config\"][unique_id\"apGp1z1E1aTXoHGhLvs0IwAAANc\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-08-28 14:07:03 (8 hours ago)	Automated web scanner. Requested suspicious paths: /site/.git/config \| /src/.git/config \| /api/.git/ ... show more Automated web scanner. Requested suspicious paths: /site/.git/config \| /src/.git/config \| /api/.git/config \| /html/.git/config \| /wordpress/.git/config \| /htdocs/.git/config \| /www/.git/config \| /app/.git/config \| /var/www/.git/config \| /public/.git/config \| /backend/.git/config \| /.git/config. UTC: 2026-08-28 13:15:07. show less	Web App Attack
🇺🇸 kosada.com	2026-08-27 13:05:38 (1 day ago)	Web vulnerability probing: /backend/.git/config	Web App Attack
🇩🇪 ghostwarriors	2026-08-27 11:50:11 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇿🇦 conure.sh	2026-08-27 11:46:04 (1 day ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇩🇪 yitzhaq	2026-08-27 11:42:48 (1 day ago)	34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /.git/config HTTP/1.1" 403 4423 "-" "crusader-wor ... show more 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /.git/config HTTP/1.1" 403 4423 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /app/.git/config HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /src/.git/config HTTP/1.1" 404 4422 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /backend/.git/config HTTP/1.1" 404 4420 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /api/.git/config HTTP/1.1" 404 454 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /www/.git/config HTTP/1.1" 404 454 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /html/.git/config HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4421 "-" "crusader-worker/1.0" 34.92.20.135 - - [27/Aug/2026:13:42:45 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 4421 show less	Web App Attack Hacking
Anonymous	2026-08-27 07:05:03 (1 day ago)	suspicious request in access.log	Web App Attack
🇮🇹 VHosting	2026-08-27 06:10:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Vianpyro	2026-08-27 03:22:30 (1 day ago)	Honeypot: 26 request(s) in 0 min. Paths: /backend/.git/config, /htdocs/.git/config, /app/.git/config ... show more Honeypot: 26 request(s) in 0 min. Paths: /backend/.git/config, /htdocs/.git/config, /app/.git/config, /.git/config, /html/.git/config. Method(s): GET. UA: crusader-worker/1.0. ASN: 396982 (Google LLC). show less	Web App Attack Bad Web Bot Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:532:1000:d49c:6a64:b468:8666

🇳🇱 193.47.62.69

🇧🇬 193.24.211.204

🇩🇪 173.44.224.54

🇧🇬 91.191.209.98

🇳🇱 91.92.40.37

🇺🇸 43.130.57.46

🇬🇧 35.203.211.151

🇳🇱 34.187.33.193

🇫🇷 2400:cb00:986:1000:bfad:ba72:6115:f72a

🇫🇷 2400:cb00:986:1000:49b2:fc71:56d0:fa71

🇳🇱 192.253.248.226

🇲🇽 158.23.184.117

🇨🇦 20.48.251.3

🇩🇪 8.209.108.11

🇨🇳 175.44.146.18

🇸🇬 146.70.192.158

🇮🇱 109.67.156.16

🇭🇰 101.36.119.203

🇧🇬 79.124.60.218